[dependabot]

Bumps flatted from 3.2.9 to 3.4.2.

Commits

• 3bf0909 3.4.2
• 885ddcc fix CWE-1321
• 0bdba70 added flatted-view to the benchmark
• 2a02dce 3.4.1
• fba4e8f Merge pull request #89 from WebReflection/python-fix
• 5fe8648 added "when in Rome" also a test for PHP
• 53517ad some minor improvement
• b3e2a0c Fixing recursion issue in Python too
• c4b46db Add SECURITY.md for security policy and reporting
• f86d071 Create dependabot.yml for version updates
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

---

This change is 

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This PR updates the flatted dependency to resolve a Prototype Pollution vulnerability (CWE-1321). While the package-lock.json has been updated, the package.json manifest is not included in the diff, which creates a synchronization risk between the manifest and the lockfile. Furthermore, no automated tests were provided to verify that serialization and deserialization logic remains functional after the upgrade.

About this PR

• The package.json manifest was not updated in this PR. Both the manifest and the lockfile should be updated together to ensure dependency consistency across environments and to prevent accidental downgrades during subsequent installs.
• No regression tests were included in this PR to verify that the application's serialization and deserialization logic continues to function correctly with the newer version of the library.

Test suggestions

• Verify the dependency version for 'flatted' is updated in the package manifest (package.json)
• Verify that the application's serialization/deserialization logic remains functional after the library upgrade

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify the dependency version for 'flatted' is updated in the package manifest (package.json)
2. Verify that the application's serialization/deserialization logic remains functional after the library upgrade

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}